Commit Graph

480 Commits

Author SHA1 Message Date
Lukas Schauer
0f69481e2b rewrote challenge validation to iterate over authorizations instead of altnames (fixes some acmev2 validation edgecases), also removed broken test-script (for now) 2018-01-28 06:13:37 +01:00
Lukas Schauer
6f3fed496d rewrote donation section in readme 2018-01-28 06:13:01 +01:00
Lukas Schauer
5fd93ea874 be more verbose for acme v2 challenge handling 2018-01-27 22:51:39 +01:00
Lukas Schauer
656af8cadc don't fail on nested json array in challenge info 2018-01-13 23:10:31 +01:00
Lukas Schauer
3e521e1c01 fixed domains.txt parsing (theoretically compatible with wildcard domains) 2018-01-13 20:54:55 +01:00
Martin Strobel
68cb1e0661 ACME v02 Support 2018-01-13 20:17:25 +01:00
Lukas Schauer
35a9f31643 changelog template, year update 2018-01-13 20:10:32 +01:00
Lukas Schauer
4a811759dc version 0.5.0 v0.5.0 2018-01-13 20:08:12 +01:00
Lukas Schauer
2adc57791c Add optional user and group configuration (fixes #434) 2017-12-18 00:35:26 +01:00
Lukas Schauer
f35aed6ae6 replace backticks with escaped dollarbracethingy (fixes #438) 2017-12-18 00:01:47 +01:00
Lukas Schauer
b6b56d0df7 export certificate alias to be used in hook scripts 2017-12-17 23:54:19 +01:00
Lukas Schauer
13c853d43b also reset configvars after domains loop 2017-12-17 23:51:23 +01:00
Lukas Schauer
c62f3d91fc implement certificate aliases as suggested by typingArtist (fixes #396) 2017-12-17 23:50:46 +01:00
typingArtist
eb1c4ac41d make certdir a parameter to sign_domain 2017-12-17 22:55:12 +01:00
Daniel Molkentin
3ec54e7e0f Add man page 2017-12-14 00:35:54 +01:00
sirrkitt
88267db7e2 Update wellknown.md
add Hiawatha to list
2017-12-14 00:33:11 +01:00
Lukas Schauer
eb4aaefda1 also inform about still-valid ocsp stapling files (fixes #457) 2017-12-14 00:11:40 +01:00
Lukas Schauer
3d97799d6a always revalidate challenges if --force is set (fixes #370) 2017-11-07 14:43:41 +01:00
Exagone313
742c0ad176 fix ocsp.der symlink 2017-10-22 16:31:25 +02:00
Andreas Loibl
7f410e9bff fix account command
backup file path generation should split the filename on the last dot instead of the first
2017-10-17 16:39:46 +02:00
Lukas Schauer
da3428a84a use nullglob, disable warning on empty CONFIG_D directory 2017-09-21 18:10:01 +02:00
Lukas Schauer
b5e178ea75 allow for spaces when extracting commonName from csr (fixes #423) 2017-09-20 15:44:05 +02:00
Lukas Schauer
bc20ec79f3 also show freebsd version 2017-09-20 15:31:38 +02:00
Marcin Gryszkalis
ce9b42d8ad fix issue #426 - version info on FreeBSD 2017-09-20 15:28:57 +02:00
Lukas Schauer
f838d93f40 stop verification loop after invalid challenge (fixes #431) 2017-09-20 15:17:30 +02:00
typingArtist
0be0ab083f replace ${CERTDIR}/${domain} with ${certdir} everywhere
• improves readability
• allows ${certdir} to be changed independent from ${domain} more easily
2017-07-18 15:46:25 +02:00
Lukas Schauer
58647cab65 added OPENSSL variable to example config (#414) 2017-07-18 15:46:25 +02:00
Lukas Schauer
c57ad87e7c fixed error handling on non-2xx http status codes (#413) 2017-07-18 03:29:39 +02:00
Lukas Schauer
2687054d25 cut path from url for ocsp host 2017-07-13 00:53:32 +02:00
Lukas Schauer
2b76d038d3 ocsp fetching should now also work with older openssl versions 2017-07-12 16:00:25 +02:00
Lukas Schauer
e339b28159 add host header to ocsp request 2017-07-12 15:33:56 +02:00
Lukas Schauer
4f3bd3e956 fixed exit_hook 2017-07-11 10:06:42 +02:00
Lukas Schauer
f86290ea52 revocation: don't fail if certificate already has been revoked (fixes #236) 2017-07-11 01:30:30 +02:00
Lukas Schauer
f1bc2b14ba cleanup old ocsp response files 2017-07-11 00:50:05 +02:00
Lukas Schauer
367ef574f1 export altnames so it can be used in hook scripts (fixes #360) 2017-07-11 00:47:37 +02:00
Lukas Schauer
4e7fb80bcd support otherName SAN entries for domain verification (fixes #356) 2017-07-11 00:35:59 +02:00
Lukas Schauer
ee75c5dca7 Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385) 2017-07-11 00:28:36 +02:00
Lukas Schauer
82ca3ffcd3 added giant donation section to readme (please send me all your money) 2017-07-10 22:48:50 +02:00
Lukas Schauer
bb99742aa7 load config for version information but disable verification 2017-07-10 21:36:32 +02:00
Lukas Schauer
60583d3ef9 added hook to run before cron command (fixes #371) 2017-07-10 21:36:10 +02:00
Lukas Schauer
cbb661ca17 specify openssl config location when converting CSR to DER (fixes #397) 2017-07-10 20:32:05 +02:00
Lukas Schauer
67cf20765c updated changelog 2017-07-10 20:28:38 +02:00
Lukas Schauer
89377a1004 git: ignore chains directory 2017-07-10 20:28:20 +02:00
Lukas Schauer
dc600e39b8 cleanup: also move .pem-revoked files (fixes #237) 2017-07-10 20:27:42 +02:00
Lukas Schauer
16e91b415b added auto-cleanup feature to changelog 2017-07-10 20:23:27 +02:00
Lukas Schauer
e6d6882c78 added option to automatically run cleanup routine (implements #389) 2017-07-10 20:21:30 +02:00
Herman van Rink
14a5f63077 Redirect additional errors to STDERR 2017-07-10 19:59:52 +02:00
Herman van Rink
5787cd6a47 Remove double output redirection, _exiterr already does >&2 2017-07-10 19:59:52 +02:00
ProBackup-nl
875c1f74e5 Add some formatting to improve human scannability (while reading) 2017-07-10 19:53:39 +02:00
Lukas Schauer
db18820991 made openssl binary configurable (closes #393, closes #379) 2017-07-10 19:13:52 +02:00